IP address secure multi-channel authentication for online transactions

A computer-implemented method for multi-factor authenticating of a user using an application server and an authentication server, said user interacting with said application server and said authentication server, said user communicating with at least one of said application server and said authentication server using a user browser program, comprising:

• authenticating using said application server said user using first factor authentication credentials;
• providing, from said application server to said authentication server, a first source IP address associated with a request for said authenticating using said first factor authentication credentials;
• instructing said user to establish a separate communication channel between said user browser program and said authentication server to perform additional authentication;
• comparing said first source IP address with a second source IP address, said second source IP address associated with communication from said user to said authentication server using said separate communication channel;
• and
• if said first source IP address does not match said second source IP address, failing authentication of said user.